easy_meli 0.6.16 → 0.6.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5f1ad1f216b20eb7f3690560c2aab7bfe78756ab458f5c52693c51ae0003b57f
-  data.tar.gz: 3656815eb894f777adefdad906772346a90b331f152496ee9a9ebc22ab32a1d5
+  metadata.gz: f53720d5c973abecb10c0a92fcdec2de507951944f211ce377bfacac6233c065
+  data.tar.gz: b69d037d9c5267fe02f35d156a3dcf007ec4ebbe0edf6b0317d052967a623547
 SHA512:
-  metadata.gz: 62042464e32bea74bd2fd7cbc8811937ac1c989ab5e6404a1019d9e4963033bbe6fe9b769e5c21e369faff6b9034fa803b1295c4a039e98f490f16ec19fad207
-  data.tar.gz: d75378c1881483a79a75aa6a012e25adfb69f072531cf2b1f348875ea654e77e733ce32c5a84df1073af020e5f08d89fa7074318a9ba6e60ec4390a1f17942ca
+  metadata.gz: b6788076ade269afbd99bde1c6b9b5d25fdb533e09c26e154cdf80666a7b0e4eceb7fd144ca5093b2268c92c397c5f2d94fd6d8ea17e032dca4236768beb6996
+  data.tar.gz: 47935bd0163b3f55827881a0dc42a17428441c4007df6f2f400498dca2a0cc6d2f034626155c7c8251aa9caa4a13bb37a8ebb4f4782d69a8f260471a78b8c9ed

data/.github/workflows/ci.yml

@@ -12,13 +12,13 @@ jobs:
         ruby_version: [ '2.7', '3.1' ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Setup ruby ${{ matrix.ruby_version }}
         uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby_version }}
       - name: Setup cache key and directory for gems cache
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         with:
           path: vendor/bundle
           key: ${{ runner.os }}-gem-use-ruby-${{ matrix.ruby_version }}-${{ hashFiles('**/Gemfile.lock') }}

data/CHANGELOG.md

@@ -1,4 +1,11 @@
 # Changelog
+## V 0.6.18
+- Update httparty from ~> 0.21 to ~> 0.24 (security fix for CVE-2025-68696 - SSRF vulnerability)
+- Fix tests to use proper path format with leading slash
+
+## V 0.6.17
+- Update rexml from 3.3.9 to 3.4.2
+
 ## V 0.6.15
 - Update rexml from 3.3.7 to 3.3.9
 

data/Gemfile.lock

@@ -1,44 +1,51 @@
 PATH
   remote: .
   specs:
-    easy_meli (0.6.16)
-      httparty (~> 0.21)
+    easy_meli (0.6.18)
+      httparty (~> 0.24)
       multi_xml (~> 0.6.0)
-      rexml (~> 3.3.9)
+      rexml (~> 3.4.2)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    addressable (2.8.0)
-      public_suffix (>= 2.0.2, < 5.0)
-    coderay (1.1.2)
-    crack (0.4.3)
-      safe_yaml (~> 1.0.0)
-    csv (3.3.0)
-    hashdiff (1.0.1)
-    httparty (0.22.0)
+    addressable (2.8.8)
+      public_suffix (>= 2.0.2, < 8.0)
+    bigdecimal (4.0.1)
+    coderay (1.1.3)
+    crack (1.0.1)
+      bigdecimal
+      rexml
+    csv (3.3.5)
+    hashdiff (1.2.1)
+    httparty (0.24.0)
       csv
       mini_mime (>= 1.0.0)
       multi_xml (>= 0.5.2)
-    method_source (1.0.0)
+    io-console (0.8.2)
+    method_source (1.1.0)
     mini_mime (1.1.5)
-    minitest (5.18.1)
-    mocha (1.11.2)
+    minitest (5.27.0)
+    mocha (3.0.1)
+      ruby2_keywords (>= 0.0.5)
     multi_xml (0.6.0)
-    pry (0.13.1)
+    pry (0.16.0)
       coderay (~> 1.1)
       method_source (~> 1.0)
-    public_suffix (4.0.6)
-    rake (13.0.1)
-    rexml (3.3.9)
-    safe_yaml (1.0.5)
-    webmock (3.8.3)
-      addressable (>= 2.3.6)
+      reline (>= 0.6.0)
+    public_suffix (7.0.0)
+    rake (13.3.1)
+    reline (0.6.3)
+      io-console (~> 0.5)
+    rexml (3.4.4)
+    ruby2_keywords (0.0.5)
+    webmock (3.26.1)
+      addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
 
 PLATFORMS
-  ruby
+  arm64-darwin-25
 
 DEPENDENCIES
   bundler (~> 2.3.6)
@@ -50,4 +57,4 @@ DEPENDENCIES
   webmock
 
 BUNDLED WITH
-   2.3.6
+   2.3.27

data/easy_meli.gemspec

@@ -29,8 +29,8 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "httparty", "~> 0.21"
-  spec.add_dependency "rexml", "~> 3.3.9"
+  spec.add_dependency "httparty", "~> 0.24"
+  spec.add_dependency "rexml", "~> 3.4.2"
   spec.add_dependency "multi_xml", "~> 0.6.0"
 
   spec.add_development_dependency "bundler", "~> 2.3.6"

data/lib/easy_meli/version.rb

@@ -1,3 +1,3 @@
 module EasyMeli
-  VERSION = "0.6.16"
+  VERSION = '0.6.18'
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: easy_meli
 version: !ruby/object:Gem::Version
-  version: 0.6.16
+  version: 0.6.18
 platform: ruby
 authors:
 - Eric Northam
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-11-27 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -16,28 +15,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.21'
+        version: '0.24'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.21'
+        version: '0.24'
 - !ruby/object:Gem::Dependency
   name: rexml
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.3.9
+        version: 3.4.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.3.9
+        version: 3.4.2
 - !ruby/object:Gem::Dependency
   name: multi_xml
   requirement: !ruby/object:Gem::Requirement
@@ -136,7 +135,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description:
 email:
 - eric@northam.us
 executables: []
@@ -167,7 +165,6 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/easybroker/easy_meli
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -182,8 +179,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.21
-signing_key:
+rubygems_version: 3.6.7
 specification_version: 4
 summary: A simple gem to work with MercadoLibre's API
 test_files: []